{
  "Event": {
    "analysis": "1",
    "date": "2026-05-07",
    "extends_uuid": "",
    "info": "KRVTZ-NET IDS alerts for 2026-05-07",
    "publish_timestamp": "1778193069",
    "published": true,
    "threat_level_id": "3",
    "timestamp": "1778193056",
    "uuid": "cfc1b9bc-c831-4397-981c-30ab074b7f98",
    "Orgc": {
      "name": "Krawczyk Industries Limited",
      "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#00ce5f",
        "local": false,
        "name": "misp:event-type=\"observation\"",
        "relationship_type": ""
      },
      {
        "colour": "#50003a",
        "local": false,
        "name": "kill-chain:Reconnaissance",
        "relationship_type": ""
      },
      {
        "colour": "#009042",
        "local": false,
        "name": "misp:automation-level=\"unsupervised\"",
        "relationship_type": ""
      },
      {
        "colour": "#edbfa2",
        "local": false,
        "name": "type:OSINT', 'osint:lifetime=\"perpetual\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-07T11:55:12.116049+00:00",
        "timestamp": "1778154913",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "13b517da-4ceb-4059-b15c-ce00def3c9d8",
        "value": "94.26.3.82",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET HUNTING curl User-Agent to Dotted Quad",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-07T12:21:07.871676+00:00",
        "timestamp": "1778156470",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "b8a3dbef-b31d-438a-88e4-fc132fea14c7",
        "value": "8.216.2.108",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET HUNTING Suspicious User-Agent Observed (Mozilla/5.0 (Windows NT XX.X Win64 x64) AppleWebKit/XXX.XX)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-07T16:38:20.894233+00:00",
        "timestamp": "1778171903",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "b6836b01-0bee-454d-85f9-391c6af1796b",
        "value": "129.146.98.52",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-07T20:25:34.580312+00:00",
        "timestamp": "1778185536",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "f76b5f17-5699-4492-86ee-bcd41bead2d6",
        "value": "202.155.186.167",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-07T20:25:42.586394+00:00",
        "timestamp": "1778185544",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "0e8f0c89-bcfa-4e5a-9bb1-506868e072b1",
        "value": "104.253.90.146",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-07T20:28:53.625838+00:00",
        "timestamp": "1778185735",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "e4265ace-0293-4881-a1f9-6e8c5aa029ce",
        "value": "5.255.110.56",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-07T22:30:54.247108+00:00",
        "timestamp": "1778193056",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "51097115-d834-4dfa-96e3-efbfe36297c9",
        "value": "2602:fb54:1400::32",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      }
    ]
  }
}